feat(preprocess): resume evidence jobs by run id

harness/tests/test_preprocess_cli.py

@@ -30,3 +30,27 @@ def test_preprocess_failure_is_structured_and_nonzero(monkeypatch, tmp_path):
     assert response.exit_code != 0
     assert json.loads(response.output) == {"status": "failed", "error": "preprocessing failed"}
     assert "secret detail" not in response.output
+
+
+def test_preprocess_resume_rejects_generation_id_before_configuration(monkeypatch, tmp_path):
+    import tht.cli.preprocess_cmd as command
+
+    called = False
+
+    def forbidden(*args, **kwargs):
+        nonlocal called
+        called = True
+
+    monkeypatch.setattr(command, "run_from_config", forbidden)
+    response = CliRunner().invoke(
+        app,
+        [
+            "preprocess", "evidence", "--resume", "gen:" + "a" * 32,
+            "--json", "-c", str(tmp_path / "workspace.yaml"),
+        ],
+    )
+    assert response.exit_code != 0
+    assert json.loads(response.output) == {
+        "status": "failed", "error": "resume requires a preprocessing run id"
+    }
+    assert called is False